Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: vQCAMWLZ/qCAOQKn0C2IkwT3OchVeL3XXCHSy4JPHgs=
Subject key identifier: 3B:5A:B4:4D:11:86:B8:F1:69:AD:C1:27:1C:57:F7:BC:CF:AD:26:4D
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 01964BFE3A194E5CFE0BE29551E0C5C6A3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 03:01:14 +0000
Manifest this update: Sat 19 Apr 2025 03:01:14 +0000
Manifest next update: Sun 20 Apr 2025 03:01:14 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: r2dMJrNZVhkU7jf8eOV15fZdP3uA5udY97dUzW2lykw=)
2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:3a:19:4e:5c:fe:0b:e2:95:51:e0:c5:c6:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Apr 19 03:01:14 2025 GMT
Not After : Apr 20 03:01:14 2025 GMT
Subject: CN=3b5ab44d1186b8f169adc1271c57f7bccfad264d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:c9:4b:7a:01:86:55:d4:35:08:77:10:e4:
d1:7d:9c:d8:94:61:79:54:48:ef:b3:b6:04:81:48:
49:94:56:31:32:0e:67:76:41:b5:f5:2d:3e:25:61:
4d:02:c1:48:a7:3d:e4:39:17:17:80:23:58:28:32:
d1:35:0f:21:22:10:dd:54:6f:ac:c2:d5:cf:82:cc:
1f:de:b4:39:03:f6:02:aa:d7:89:cd:55:90:5d:eb:
6f:46:84:e4:7a:73:ff:b9:c0:36:95:7e:dd:bc:0f:
32:a2:44:e1:33:d6:09:17:a7:73:6c:69:0b:83:23:
8c:54:6e:46:16:44:75:ab:46:52:aa:72:80:d1:b9:
4b:de:75:55:2c:78:27:e9:7b:6d:78:0b:e3:7a:64:
ac:42:cc:2a:a6:ff:ae:cd:ac:98:89:e3:c7:f6:c1:
5e:38:0d:d2:e0:78:d6:5d:d7:71:39:e1:ea:b7:5e:
89:be:0b:50:38:25:74:c8:c3:9d:99:e6:b4:aa:a4:
ad:cf:eb:4e:33:30:e7:23:eb:1a:29:07:ab:bb:91:
c6:c4:bd:58:17:17:f8:ca:87:d1:81:cd:a2:c6:ce:
56:89:0c:c5:08:5c:41:33:2e:22:db:c2:f0:46:aa:
34:a6:9b:a7:41:ea:c3:a9:53:e5:52:38:d5:8b:3b:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5A:B4:4D:11:86:B8:F1:69:AD:C1:27:1C:57:F7:BC:CF:AD:26:4D
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:70:8c:4c:7c:f2:9b:fa:8b:a5:cd:4e:46:e3:10:b8:6e:e5:
59:72:1f:ab:4c:ef:1c:6d:d3:8a:6d:51:d9:4d:49:90:ad:41:
41:ae:f2:54:bc:4c:66:88:96:b3:ba:17:39:a8:5f:04:f1:27:
0f:51:42:2a:c9:7f:78:f4:c7:3c:00:c0:fb:aa:00:51:4d:f8:
a0:c0:f3:7a:a1:33:cb:7c:62:4a:fd:0a:9f:84:90:53:00:27:
35:54:ed:9c:69:fe:53:2e:43:98:9b:65:59:c6:1e:c7:34:88:
10:aa:a8:43:33:91:d3:f1:3a:95:ed:bc:a5:cc:49:77:5c:62:
ea:c8:9b:44:7e:54:fe:10:96:b0:21:0c:27:b6:6f:1d:28:79:
ae:ea:ae:a1:05:c1:0c:c4:4f:82:08:96:ef:10:7c:bb:6f:6e:
f4:74:18:c9:38:3b:b0:40:08:dd:17:ff:5a:38:1d:4b:71:bf:
73:c9:62:d8:26:ee:95:6a:e1:8a:a0:21:59:24:02:b4:99:97:
3d:4f:76:d1:a8:60:a1:74:70:0f:2e:30:ef:ca:4f:bf:80:6f:
64:bd:4c:fe:75:dd:fe:9d:b5:8e:54:db:4c:46:04:fb:1a:9a:
c0:53:30:ca:84:77:ec:06:28:79:7f:c4:a7:91:75:5c:fe:eb:
89:cf:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:05 2025 by rpki-client